2 * ipcp.c - PPP IP Control Protocol.
4 * Copyright (c) 1989 Carnegie Mellon University.
7 * Redistribution and use in source and binary forms are permitted
8 * provided that the above copyright notice and this paragraph are
9 * duplicated in all such forms and that any documentation,
10 * advertising materials, and other materials related to such
11 * distribution and use acknowledge that the software was developed
12 * by Carnegie Mellon University. The name of the
13 * University may not be used to endorse or promote products derived
14 * from this software without specific prior written permission.
15 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
16 * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
17 * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 static char rcsid[] = "$Id: ipcp.c,v 1.22 1995/12/18 03:45:56 paulus Exp $";
31 #include <sys/types.h>
32 #include <sys/socket.h>
33 #include <netinet/in.h>
38 #include "pathnames.h"
41 ipcp_options ipcp_wantoptions[NUM_PPP]; /* Options that we want to request */
42 ipcp_options ipcp_gotoptions[NUM_PPP]; /* Options that peer ack'd */
43 ipcp_options ipcp_allowoptions[NUM_PPP]; /* Options we allow peer to request */
44 ipcp_options ipcp_hisoptions[NUM_PPP]; /* Options that we ack'd */
47 static int cis_received[NUM_PPP]; /* # Conf-Reqs received */
50 * Callbacks for fsm code. (CI = Configuration Information)
52 static void ipcp_resetci __P((fsm *)); /* Reset our CI */
53 static int ipcp_cilen __P((fsm *)); /* Return length of our CI */
54 static void ipcp_addci __P((fsm *, u_char *, int *)); /* Add our CI */
55 static int ipcp_ackci __P((fsm *, u_char *, int)); /* Peer ack'd our CI */
56 static int ipcp_nakci __P((fsm *, u_char *, int)); /* Peer nak'd our CI */
57 static int ipcp_rejci __P((fsm *, u_char *, int)); /* Peer rej'd our CI */
58 static int ipcp_reqci __P((fsm *, u_char *, int *, int)); /* Rcv CI */
59 static void ipcp_up __P((fsm *)); /* We're UP */
60 static void ipcp_down __P((fsm *)); /* We're DOWN */
61 static void ipcp_script __P((fsm *, char *)); /* Run an up/down script */
63 fsm ipcp_fsm[NUM_PPP]; /* IPCP fsm structure */
65 static fsm_callbacks ipcp_callbacks = { /* IPCP callback routines */
66 ipcp_resetci, /* Reset our Configuration Information */
67 ipcp_cilen, /* Length of our Configuration Information */
68 ipcp_addci, /* Add our Configuration Information */
69 ipcp_ackci, /* ACK our Configuration Information */
70 ipcp_nakci, /* NAK our Configuration Information */
71 ipcp_rejci, /* Reject our Configuration Information */
72 ipcp_reqci, /* Request peer's Configuration Information */
73 ipcp_up, /* Called when fsm reaches OPENED state */
74 ipcp_down, /* Called when fsm leaves OPENED state */
75 NULL, /* Called when we want the lower layer up */
76 NULL, /* Called when we want the lower layer down */
77 NULL, /* Called when Protocol-Reject received */
78 NULL, /* Retransmission is necessary */
79 NULL, /* Called to handle protocol-specific codes */
80 "IPCP" /* String name of protocol */
83 struct protent ipcp_protent = {
84 PPP_IPCP, ipcp_init, ipcp_input, ipcp_protrej,
85 ipcp_lowerup, ipcp_lowerdown, ipcp_open, ipcp_close,
86 ipcp_printpkt, NULL, 1, "IPCP"
90 * Lengths of configuration options.
93 #define CILEN_COMPRESS 4 /* min length for compression protocol opt. */
94 #define CILEN_VJ 6 /* length for RFC1332 Van-Jacobson opt. */
95 #define CILEN_ADDR 6 /* new-style single address option */
96 #define CILEN_ADDRS 10 /* old-style dual address option */
99 #define CODENAME(x) ((x) == CONFACK ? "ACK" : \
100 (x) == CONFNAK ? "NAK" : "REJ")
104 * Make a string representation of a network IP address.
112 ipaddr = ntohl(ipaddr);
114 sprintf(b, "%d.%d.%d.%d",
115 (u_char)(ipaddr >> 24),
116 (u_char)(ipaddr >> 16),
117 (u_char)(ipaddr >> 8),
124 * ipcp_init - Initialize IPCP.
130 fsm *f = &ipcp_fsm[unit];
131 ipcp_options *wo = &ipcp_wantoptions[unit];
132 ipcp_options *ao = &ipcp_allowoptions[unit];
135 f->protocol = PPP_IPCP;
136 f->callbacks = &ipcp_callbacks;
137 fsm_init(&ipcp_fsm[unit]);
139 memset(wo, 0, sizeof(*wo));
140 memset(ao, 0, sizeof(*ao));
144 wo->vj_protocol = IPCP_VJ_COMP;
145 wo->maxslotindex = MAX_STATES - 1; /* really max index */
148 /* max slots and slot-id compression are currently hardwired in */
149 /* ppp_if.c to 16 and 1, this needs to be changed (among other */
154 ao->maxslotindex = MAX_STATES - 1;
158 * XXX These control whether the user may use the proxyarp
159 * and defaultroute options.
162 ao->default_route = 1;
167 * ipcp_open - IPCP is allowed to come up.
173 fsm_open(&ipcp_fsm[unit]);
178 * ipcp_close - Take IPCP down.
181 ipcp_close(unit, reason)
185 fsm_close(&ipcp_fsm[unit], reason);
190 * ipcp_lowerup - The lower layer is up.
196 fsm_lowerup(&ipcp_fsm[unit]);
201 * ipcp_lowerdown - The lower layer is down.
207 fsm_lowerdown(&ipcp_fsm[unit]);
212 * ipcp_input - Input IPCP packet.
215 ipcp_input(unit, p, len)
220 fsm_input(&ipcp_fsm[unit], p, len);
225 * ipcp_protrej - A Protocol-Reject was received for IPCP.
227 * Pretend the lower layer went down, so we shut up.
233 fsm_lowerdown(&ipcp_fsm[unit]);
238 * ipcp_resetci - Reset our CI.
244 ipcp_options *wo = &ipcp_wantoptions[f->unit];
246 wo->req_addr = wo->neg_addr && ipcp_allowoptions[f->unit].neg_addr;
247 if (wo->ouraddr == 0)
248 wo->accept_local = 1;
249 if (wo->hisaddr == 0)
250 wo->accept_remote = 1;
251 ipcp_gotoptions[f->unit] = *wo;
252 cis_received[f->unit] = 0;
257 * ipcp_cilen - Return length of our CI.
263 ipcp_options *go = &ipcp_gotoptions[f->unit];
265 #define LENCIVJ(neg, old) (neg ? (old? CILEN_COMPRESS : CILEN_VJ) : 0)
266 #define LENCIADDR(neg, old) (neg ? (old? CILEN_ADDRS : CILEN_ADDR) : 0)
268 return (LENCIADDR(go->neg_addr, go->old_addrs) +
269 LENCIVJ(go->neg_vj, go->old_vj));
274 * ipcp_addci - Add our desired CIs to a packet.
277 ipcp_addci(f, ucp, lenp)
282 ipcp_options *wo = &ipcp_wantoptions[f->unit];
283 ipcp_options *go = &ipcp_gotoptions[f->unit];
284 ipcp_options *ho = &ipcp_hisoptions[f->unit];
287 #define ADDCIVJ(opt, neg, val, old, maxslotindex, cflag) \
289 int vjlen = old? CILEN_COMPRESS : CILEN_VJ; \
290 if (len >= vjlen) { \
292 PUTCHAR(vjlen, ucp); \
293 PUTSHORT(val, ucp); \
295 PUTCHAR(maxslotindex, ucp); \
296 PUTCHAR(cflag, ucp); \
303 #define ADDCIADDR(opt, neg, old, val1, val2) \
305 int addrlen = (old? CILEN_ADDRS: CILEN_ADDR); \
306 if (len >= addrlen) { \
309 PUTCHAR(addrlen, ucp); \
322 * First see if we want to change our options to the old
323 * forms because we have received old forms from the peer.
325 if (wo->neg_addr && !go->neg_addr && !go->old_addrs) {
326 /* use the old style of address negotiation */
330 if (wo->neg_vj && !go->neg_vj && !go->old_vj) {
331 /* try an older style of VJ negotiation */
332 if (cis_received[f->unit] == 0) {
333 /* keep trying the new style until we see some CI from the peer */
336 /* use the old style only if the peer did */
337 if (ho->neg_vj && ho->old_vj) {
340 go->vj_protocol = ho->vj_protocol;
345 ADDCIADDR((go->old_addrs? CI_ADDRS: CI_ADDR), go->neg_addr,
346 go->old_addrs, go->ouraddr, go->hisaddr);
348 ADDCIVJ(CI_COMPRESSTYPE, go->neg_vj, go->vj_protocol, go->old_vj,
349 go->maxslotindex, go->cflag);
356 * ipcp_ackci - Ack our CIs.
363 ipcp_ackci(f, p, len)
368 ipcp_options *go = &ipcp_gotoptions[f->unit];
369 u_short cilen, citype, cishort;
371 u_char cimaxslotindex, cicflag;
374 * CIs must be in exactly the same order that we sent...
375 * Check packet length and CI length at each step.
376 * If we find any deviations, then this packet is bad.
379 #define ACKCIVJ(opt, neg, val, old, maxslotindex, cflag) \
381 int vjlen = old? CILEN_COMPRESS : CILEN_VJ; \
382 if ((len -= vjlen) < 0) \
384 GETCHAR(citype, p); \
386 if (cilen != vjlen || \
389 GETSHORT(cishort, p); \
390 if (cishort != val) \
393 GETCHAR(cimaxslotindex, p); \
394 if (cimaxslotindex != maxslotindex) \
396 GETCHAR(cicflag, p); \
397 if (cicflag != cflag) \
402 #define ACKCIADDR(opt, neg, old, val1, val2) \
404 int addrlen = (old? CILEN_ADDRS: CILEN_ADDR); \
406 if ((len -= addrlen) < 0) \
408 GETCHAR(citype, p); \
410 if (cilen != addrlen || \
415 if (val1 != cilong) \
420 if (val2 != cilong) \
425 ACKCIADDR((go->old_addrs? CI_ADDRS: CI_ADDR), go->neg_addr,
426 go->old_addrs, go->ouraddr, go->hisaddr);
428 ACKCIVJ(CI_COMPRESSTYPE, go->neg_vj, go->vj_protocol, go->old_vj,
429 go->maxslotindex, go->cflag);
432 * If there are any remaining CIs, then this packet is bad.
439 IPCPDEBUG((LOG_INFO, "ipcp_ackci: received bad Ack!"));
444 * ipcp_nakci - Peer has sent a NAK for some of our CIs.
445 * This should not modify any state if the Nak is bad
446 * or if IPCP is in the OPENED state.
453 ipcp_nakci(f, p, len)
458 ipcp_options *go = &ipcp_gotoptions[f->unit];
459 u_char cimaxslotindex, cicflag;
460 u_char citype, cilen, *next;
462 u_int32_t ciaddr1, ciaddr2, l;
463 ipcp_options no; /* options we've seen Naks for */
464 ipcp_options try; /* options to request next time */
466 BZERO(&no, sizeof(no));
470 * Any Nak'd CIs must be in exactly the same order that we sent.
471 * Check packet length and CI length at each step.
472 * If we find any deviations, then this packet is bad.
474 #define NAKCIADDR(opt, neg, old, code) \
476 len >= (cilen = (old? CILEN_ADDRS: CILEN_ADDR)) && \
482 ciaddr1 = htonl(l); \
485 ciaddr2 = htonl(l); \
493 #define NAKCIVJ(opt, neg, code) \
495 ((cilen = p[1]) == CILEN_COMPRESS || cilen == CILEN_VJ) && \
500 GETSHORT(cishort, p); \
506 * Accept the peer's idea of {our,his} address, if different
507 * from our idea, only if the accept_{local,remote} flag is set.
509 NAKCIADDR((go->old_addrs? CI_ADDRS: CI_ADDR), neg_addr, go->old_addrs,
510 if (go->accept_local && ciaddr1) { /* Do we know our address? */
511 try.ouraddr = ciaddr1;
512 IPCPDEBUG((LOG_INFO, "local IP address %s",
515 if (go->accept_remote && ciaddr2) { /* Does he know his? */
516 try.hisaddr = ciaddr2;
517 IPCPDEBUG((LOG_INFO, "remote IP address %s",
523 * Accept the peer's value of maxslotindex provided that it
524 * is less than what we asked for. Turn off slot-ID compression
525 * if the peer wants. Send old-style compress-type option if
528 NAKCIVJ(CI_COMPRESSTYPE, neg_vj,
529 if (cilen == CILEN_VJ) {
530 GETCHAR(cimaxslotindex, p);
532 if (cishort == IPCP_VJ_COMP) {
534 if (cimaxslotindex < go->maxslotindex)
535 try.maxslotindex = cimaxslotindex;
542 if (cishort == IPCP_VJ_COMP || cishort == IPCP_VJ_COMP_OLD) {
544 try.vj_protocol = cishort;
552 * There may be remaining CIs, if the peer is requesting negotiation
553 * on an option that we didn't include in our request packet.
554 * If they want to negotiate about IP addresses, we comply.
555 * If they want us to ask for compression, we refuse.
557 while (len > CILEN_VOID) {
560 if( (len -= cilen) < 0 )
562 next = p + cilen - 2;
565 case CI_COMPRESSTYPE:
566 if (go->neg_vj || no.neg_vj ||
567 (cilen != CILEN_VJ && cilen != CILEN_COMPRESS))
572 if (go->neg_addr && go->old_addrs || no.old_addrs
573 || cilen != CILEN_ADDRS)
579 if (ciaddr1 && go->accept_local)
580 try.ouraddr = ciaddr1;
583 if (ciaddr2 && go->accept_remote)
584 try.hisaddr = ciaddr2;
588 if (go->neg_addr || no.neg_addr || cilen != CILEN_ADDR)
593 if (ciaddr1 && go->accept_local)
594 try.ouraddr = ciaddr1;
595 if (try.ouraddr != 0)
603 /* If there is still anything left, this packet is bad. */
608 * OK, the Nak is good. Now we can update state.
610 if (f->state != OPENED)
616 IPCPDEBUG((LOG_INFO, "ipcp_nakci: received bad Nak!"));
622 * ipcp_rejci - Reject some of our CIs.
625 ipcp_rejci(f, p, len)
630 ipcp_options *go = &ipcp_gotoptions[f->unit];
631 u_char cimaxslotindex, ciflag, cilen;
634 ipcp_options try; /* options to request next time */
638 * Any Rejected CIs must be in exactly the same order that we sent.
639 * Check packet length and CI length at each step.
640 * If we find any deviations, then this packet is bad.
642 #define REJCIADDR(opt, neg, old, val1, val2) \
644 len >= (cilen = old? CILEN_ADDRS: CILEN_ADDR) && \
652 /* Check rejected value. */ \
653 if (cilong != val1) \
658 /* Check rejected value. */ \
659 if (cilong != val2) \
665 #define REJCIVJ(opt, neg, val, old, maxslot, cflag) \
667 p[1] == (old? CILEN_COMPRESS : CILEN_VJ) && \
672 GETSHORT(cishort, p); \
673 /* Check rejected value. */ \
674 if (cishort != val) \
677 GETCHAR(cimaxslotindex, p); \
678 if (cimaxslotindex != maxslot) \
680 GETCHAR(ciflag, p); \
681 if (ciflag != cflag) \
687 REJCIADDR((go->old_addrs? CI_ADDRS: CI_ADDR), neg_addr,
688 go->old_addrs, go->ouraddr, go->hisaddr);
690 REJCIVJ(CI_COMPRESSTYPE, neg_vj, go->vj_protocol, go->old_vj,
691 go->maxslotindex, go->cflag);
694 * If there are any remaining CIs, then this packet is bad.
699 * Now we can update state.
701 if (f->state != OPENED)
706 IPCPDEBUG((LOG_INFO, "ipcp_rejci: received bad Reject!"));
712 * ipcp_reqci - Check the peer's requested CIs and send appropriate response.
714 * Returns: CONFACK, CONFNAK or CONFREJ and input packet modified
715 * appropriately. If reject_if_disagree is non-zero, doesn't return
716 * CONFNAK; returns CONFREJ if it can't return CONFACK.
719 ipcp_reqci(f, inp, len, reject_if_disagree)
721 u_char *inp; /* Requested CIs */
722 int *len; /* Length of requested CIs */
723 int reject_if_disagree;
725 ipcp_options *wo = &ipcp_wantoptions[f->unit];
726 ipcp_options *ho = &ipcp_hisoptions[f->unit];
727 ipcp_options *ao = &ipcp_allowoptions[f->unit];
728 ipcp_options *go = &ipcp_gotoptions[f->unit];
729 u_char *cip, *next; /* Pointer to current and next CIs */
730 u_short cilen, citype; /* Parsed len, type */
731 u_short cishort; /* Parsed short value */
732 u_int32_t tl, ciaddr1, ciaddr2;/* Parsed address values */
733 int rc = CONFACK; /* Final packet return code */
734 int orc; /* Individual option return code */
735 u_char *p; /* Pointer to next char to parse */
736 u_char *ucp = inp; /* Pointer to current output char */
737 int l = *len; /* Length left */
738 u_char maxslotindex, cflag;
741 * Reset all his options.
743 BZERO(ho, sizeof(*ho));
746 * Process all his options.
750 orc = CONFACK; /* Assume success */
751 cip = p = next; /* Remember begining of CI */
752 if (l < 2 || /* Not enough data for CI header or */
753 p[1] < 2 || /* CI length too small or */
754 p[1] > l) { /* CI length too big? */
755 IPCPDEBUG((LOG_INFO, "ipcp_reqci: bad CI length!"));
756 orc = CONFREJ; /* Reject bad CI */
757 cilen = l; /* Reject till end of packet */
758 l = 0; /* Don't loop again */
761 GETCHAR(citype, p); /* Parse CI type */
762 GETCHAR(cilen, p); /* Parse CI length */
763 l -= cilen; /* Adjust remaining length */
764 next += cilen; /* Step to next CI */
766 switch (citype) { /* Check CI type */
768 IPCPDEBUG((LOG_INFO, "ipcp: received ADDRS "));
770 cilen != CILEN_ADDRS) { /* Check CI length */
771 orc = CONFREJ; /* Reject CI */
776 * If he has no address, or if we both have his address but
777 * disagree about it, then NAK it with our idea.
778 * In particular, if we don't know his address, but he does,
781 GETLONG(tl, p); /* Parse source address (his) */
783 IPCPDEBUG((LOG_INFO, "(%s:", ip_ntoa(ciaddr1)));
784 if (ciaddr1 != wo->hisaddr
785 && (ciaddr1 == 0 || !wo->accept_remote)) {
787 if (!reject_if_disagree) {
788 DECPTR(sizeof(u_int32_t), p);
789 tl = ntohl(wo->hisaddr);
792 } else if (ciaddr1 == 0 && wo->hisaddr == 0) {
794 * If neither we nor he knows his address, reject the option.
797 wo->req_addr = 0; /* don't NAK with 0.0.0.0 later */
802 * If he doesn't know our address, or if we both have our address
803 * but disagree about it, then NAK it with our idea.
805 GETLONG(tl, p); /* Parse desination address (ours) */
807 IPCPDEBUG((LOG_INFO, "%s)", ip_ntoa(ciaddr2)));
808 if (ciaddr2 != wo->ouraddr) {
809 if (ciaddr2 == 0 || !wo->accept_local) {
811 if (!reject_if_disagree) {
812 DECPTR(sizeof(u_int32_t), p);
813 tl = ntohl(wo->ouraddr);
817 go->ouraddr = ciaddr2; /* accept peer's idea */
823 ho->hisaddr = ciaddr1;
824 ho->ouraddr = ciaddr2;
828 IPCPDEBUG((LOG_INFO, "ipcp: received ADDR "));
831 cilen != CILEN_ADDR) { /* Check CI length */
832 orc = CONFREJ; /* Reject CI */
837 * If he has no address, or if we both have his address but
838 * disagree about it, then NAK it with our idea.
839 * In particular, if we don't know his address, but he does,
842 GETLONG(tl, p); /* Parse source address (his) */
844 IPCPDEBUG((LOG_INFO, "(%s)", ip_ntoa(ciaddr1)));
845 if (ciaddr1 != wo->hisaddr
846 && (ciaddr1 == 0 || !wo->accept_remote)) {
848 if (!reject_if_disagree) {
849 DECPTR(sizeof(u_int32_t), p);
850 tl = ntohl(wo->hisaddr);
853 } else if (ciaddr1 == 0 && wo->hisaddr == 0) {
855 * Don't ACK an address of 0.0.0.0 - reject it instead.
858 wo->req_addr = 0; /* don't NAK with 0.0.0.0 later */
863 ho->hisaddr = ciaddr1;
868 /* Microsoft primary DNS request */
869 IPCPDEBUG((LOG_INFO, "ipcp: received DNS1 Request "));
871 /* If we do not have a DNS address then we cannot send it */
872 if (ao->dnsaddr[0] == 0 ||
873 cilen != CILEN_ADDR) { /* Check CI length */
874 orc = CONFREJ; /* Reject CI */
878 if (htonl(tl) != ao->dnsaddr[0]) {
879 DECPTR(sizeof(u_int32_t), p);
880 tl = ntohl(ao->dnsaddr[0]);
887 /* Microsoft secondary DNS request */
888 IPCPDEBUG((LOG_INFO, "ipcp: received DNS2 Request "));
890 /* If we do not have a DNS address then we cannot send it */
891 if (ao->dnsaddr[1] == 0 || /* Yes, this is the first one! */
892 cilen != CILEN_ADDR) { /* Check CI length */
893 orc = CONFREJ; /* Reject CI */
897 if (htonl(tl) != ao->dnsaddr[1]) { /* and this is the 2nd one */
898 DECPTR(sizeof(u_int32_t), p);
899 tl = ntohl(ao->dnsaddr[1]);
906 case CI_COMPRESSTYPE:
907 IPCPDEBUG((LOG_INFO, "ipcp: received COMPRESSTYPE "));
909 (cilen != CILEN_VJ && cilen != CILEN_COMPRESS)) {
913 GETSHORT(cishort, p);
914 IPCPDEBUG((LOG_INFO, "(%d)", cishort));
916 if (!(cishort == IPCP_VJ_COMP ||
917 (cishort == IPCP_VJ_COMP_OLD && cilen == CILEN_COMPRESS))) {
923 ho->vj_protocol = cishort;
924 if (cilen == CILEN_VJ) {
925 GETCHAR(maxslotindex, p);
926 if (maxslotindex > ao->maxslotindex) {
928 if (!reject_if_disagree){
930 PUTCHAR(ao->maxslotindex, p);
934 if (cflag && !ao->cflag) {
936 if (!reject_if_disagree){
938 PUTCHAR(wo->cflag, p);
941 ho->maxslotindex = maxslotindex;
945 ho->maxslotindex = MAX_STATES - 1;
956 IPCPDEBUG((LOG_INFO, " (%s)\n", CODENAME(orc)));
958 if (orc == CONFACK && /* Good CI */
959 rc != CONFACK) /* but prior CI wasnt? */
960 continue; /* Don't send this one */
962 if (orc == CONFNAK) { /* Nak this CI? */
963 if (reject_if_disagree) /* Getting fed up with sending NAKs? */
964 orc = CONFREJ; /* Get tough if so */
966 if (rc == CONFREJ) /* Rejecting prior CI? */
967 continue; /* Don't send this one */
968 if (rc == CONFACK) { /* Ack'd all prior CIs? */
969 rc = CONFNAK; /* Not anymore... */
970 ucp = inp; /* Backup */
975 if (orc == CONFREJ && /* Reject this CI */
976 rc != CONFREJ) { /* but no prior ones? */
978 ucp = inp; /* Backup */
981 /* Need to move CI? */
983 BCOPY(cip, ucp, cilen); /* Move it */
985 /* Update output pointer */
990 * If we aren't rejecting this packet, and we want to negotiate
991 * their address, and they didn't send their address, then we
992 * send a NAK with a CI_ADDR option appended. We assume the
993 * input buffer is long enough that we can append the extra
996 if (rc != CONFREJ && !ho->neg_addr &&
997 wo->req_addr && !reject_if_disagree) {
1000 ucp = inp; /* reset pointer */
1001 wo->req_addr = 0; /* don't ask again */
1003 PUTCHAR(CI_ADDR, ucp);
1004 PUTCHAR(CILEN_ADDR, ucp);
1005 tl = ntohl(wo->hisaddr);
1009 *len = ucp - inp; /* Compute output length */
1010 IPCPDEBUG((LOG_INFO, "ipcp: returning Configure-%s", CODENAME(rc)));
1011 return (rc); /* Return final code */
1016 * ipcp_up - IPCP has come UP.
1018 * Configure the IP network interface appropriately and bring it up.
1025 ipcp_options *ho = &ipcp_hisoptions[f->unit];
1026 ipcp_options *go = &ipcp_gotoptions[f->unit];
1028 IPCPDEBUG((LOG_INFO, "ipcp: up"));
1029 go->default_route = 0;
1033 * We must have a non-zero IP address for both ends of the link.
1036 ho->hisaddr = ipcp_wantoptions[f->unit].hisaddr;
1038 if (ho->hisaddr == 0) {
1039 syslog(LOG_ERR, "Could not determine remote IP address");
1040 ipcp_close(f->unit, "Could not determine remote IP address");
1043 if (go->ouraddr == 0) {
1044 syslog(LOG_ERR, "Could not determine local IP address");
1045 ipcp_close(f->unit, "Could not determine local IP address");
1050 * Check that the peer is allowed to use the IP address it wants.
1052 if (!auth_ip_addr(f->unit, ho->hisaddr)) {
1053 syslog(LOG_ERR, "Peer is not authorized to use remote address %s",
1054 ip_ntoa(ho->hisaddr));
1055 ipcp_close(f->unit, "Unauthorized remote IP address");
1059 syslog(LOG_NOTICE, "local IP address %s", ip_ntoa(go->ouraddr));
1060 syslog(LOG_NOTICE, "remote IP address %s", ip_ntoa(ho->hisaddr));
1063 * Set IP addresses and (if specified) netmask.
1065 mask = GetMask(go->ouraddr);
1066 if (!sifaddr(f->unit, go->ouraddr, ho->hisaddr, mask)) {
1067 IPCPDEBUG((LOG_WARNING, "sifaddr failed"));
1068 ipcp_close(f->unit, "Interface configuration failed");
1072 /* set tcp compression */
1073 sifvjcomp(f->unit, ho->neg_vj, ho->cflag, ho->maxslotindex);
1075 /* bring the interface up for IP */
1076 if (!sifup(f->unit)) {
1077 IPCPDEBUG((LOG_WARNING, "sifup failed"));
1078 ipcp_close(f->unit, "Interface configuration failed");
1082 /* assign a default route through the interface if required */
1083 if (ipcp_wantoptions[f->unit].default_route)
1084 if (sifdefaultroute(f->unit, ho->hisaddr))
1085 go->default_route = 1;
1087 /* Make a proxy ARP entry if requested. */
1088 if (ipcp_wantoptions[f->unit].proxy_arp)
1089 if (sifproxyarp(f->unit, ho->hisaddr))
1093 * Execute the ip-up script, like this:
1094 * /etc/ppp/ip-up interface tty speed local-IP remote-IP
1096 ipcp_script(f, _PATH_IPUP);
1102 * ipcp_down - IPCP has gone DOWN.
1104 * Take the IP network interface down, clear its addresses
1105 * and delete routes through it.
1111 u_int32_t ouraddr, hisaddr;
1113 IPCPDEBUG((LOG_INFO, "ipcp: down"));
1115 ouraddr = ipcp_gotoptions[f->unit].ouraddr;
1116 hisaddr = ipcp_hisoptions[f->unit].hisaddr;
1117 if (ipcp_gotoptions[f->unit].proxy_arp)
1118 cifproxyarp(f->unit, hisaddr);
1119 if (ipcp_gotoptions[f->unit].default_route)
1120 cifdefaultroute(f->unit, hisaddr);
1122 cifaddr(f->unit, ouraddr, hisaddr);
1124 /* Execute the ip-down script */
1125 ipcp_script(f, _PATH_IPDOWN);
1130 * ipcp_script - Execute a script with arguments
1131 * interface-name tty-name speed local-IP remote-IP.
1134 ipcp_script(f, script)
1138 char strspeed[32], strlocal[32], strremote[32];
1141 sprintf(strspeed, "%d", baud_rate);
1142 strcpy(strlocal, ip_ntoa(ipcp_gotoptions[f->unit].ouraddr));
1143 strcpy(strremote, ip_ntoa(ipcp_hisoptions[f->unit].hisaddr));
1150 argv[5] = strremote;
1153 run_program(script, argv, 0);
1157 * ipcp_printpkt - print the contents of an IPCP packet.
1159 char *ipcp_codenames[] = {
1160 "ConfReq", "ConfAck", "ConfNak", "ConfRej",
1161 "TermReq", "TermAck", "CodeRej"
1165 ipcp_printpkt(p, plen, printer, arg)
1171 int code, id, len, olen;
1172 u_char *pstart, *optend;
1176 if (plen < HEADERLEN)
1182 if (len < HEADERLEN || len > plen)
1185 if (code >= 1 && code <= sizeof(ipcp_codenames) / sizeof(char *))
1186 printer(arg, " %s", ipcp_codenames[code-1]);
1188 printer(arg, " code=0x%x", code);
1189 printer(arg, " id=0x%x", id);
1196 /* print option list */
1201 if (olen < 2 || olen > len) {
1209 if (olen == CILEN_ADDRS) {
1212 printer(arg, "addrs %s", ip_ntoa(htonl(cilong)));
1214 printer(arg, " %s", ip_ntoa(htonl(cilong)));
1217 case CI_COMPRESSTYPE:
1218 if (olen >= CILEN_COMPRESS) {
1220 GETSHORT(cishort, p);
1221 printer(arg, "compress ");
1226 case IPCP_VJ_COMP_OLD:
1227 printer(arg, "old-VJ");
1230 printer(arg, "0x%x", cishort);
1235 if (olen == CILEN_ADDR) {
1238 printer(arg, "addr %s", ip_ntoa(htonl(cilong)));
1242 while (p < optend) {
1244 printer(arg, " %.2x", code);
1251 /* print the rest of the bytes in the packet */
1252 for (; len > 0; --len) {
1254 printer(arg, " %.2x", code);